286 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,321Claude Code6,834Data and AI3,600Backend and APIs3,547Git and workflow3,531Languages3,455Planning3,297Code review2,865Testing2,607DevOps and cloud2,439Writing and docs2,428Memory and context2,373
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| pierreb-devkit/Node weareopensource.me :computer: Node - Boilerplate Back : Express, Jwt, Mongo, Sequelize | 20 | Claude Code, Codex, GitHub Copilot, OpenCode | 4 | 2,293 tok |
| spences10/mcp-sqlite-tools A Model Context Protocol (MCP) server that provides comprehensive SQLite database operatio | 20 | GitHub Copilot | 1 | 239 tok |
| Bugb-Technologies/guardlink guardlink.bugb.io AI-maintained security annotations for code. Continuous threat modeling, enforced in CI. | 19 | Claude Code, Codex, GitHub Copilot, OpenCode, Windsurf | 4 | 3,361 tok |
| fadwen/Powershell-Copilot-Standards techbyjeff.net Enterprise-grade PowerShell development standards and GitHub Copilot instructions for cons | 19 | GitHub Copilot | 24 | 43,625 tok |
| ssdeanx/secure-rag-multi-agent deanmachines.com Secure Retrieval-Augmented Generation (RAG) with role-based access control using Mastra AI | 19 | Codex, GitHub Copilot, OpenCode | 3 | 15,972 tok |
| ashlrai/phantom-secrets phm.dev Stop AI coding agents from leaking your API keys. Local proxy + MCP that swaps real secret | 18 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode | 4 | 6,798 tok |
| adcontextprotocol/adcp-client adcontextprotocol.github.io A Typescript SDK for the AdCP protocol (client and server) | 18 | Claude Code, Codex, GitHub Copilot, OpenCode | 37 | 12,553 tok |
| eupassarin/simplesign eupassarin.github.io Enterprise digital signatures for .NET — PAdES · CAdES · XAdES. Zero external crypto deps. | 18 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 3,698 tok |
| WYRE-AI/itglue-mcp conduit.wyre.ai MCP server for IT Glue — documentation, passwords, configurations, and flexible asset tool | 17 | GitHub Copilot | 1 | 858 tok |
| tene-ai/tene tene.sh AI-safe secret manager CLI for Claude Code, Cursor, and other AI agents. Local-first, encr | 17 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 4 | 3,109 tok |
| TsuyoshiUshio/buka-samples Sample Project for the buka project | 17 | Claude Code, Codex, GitHub Copilot, OpenCode | 6 | 2,584 tok |
| klodr/gmail-mcp Gmail MCP server — scope-gated tools (readonly / send / modify), path jails for attachment | 16 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 3,076 tok |
| snowdreamtech/template snowdreamtech.github.io An enterprise-grade, foundational template designed for multi-AI IDE collaboration. This r | 16 | Claude Code, Codex, GitHub Copilot, Cursor, Gemini CLI, OpenCode, Windsurf | 7 | 2,764 tok |
| CsabaKovacs/rulesmith Local-first CLI + MCP server that maps repositories and generates evidence-backed AI agent | 15 | Claude Code, Codex, GitHub Copilot, OpenCode | 11 | 4,962 tok |
| Tommertom/sonos-ts-mcp Sonos MCP server for Sonos using Typescript | 15 | GitHub Copilot | 3 | 5,893 tok |
| totalhack/zillion-web Zillion Web: A Demo UI and Web API for Zillion | 15 | GitHub Copilot | 1 | 103 tok |
| hoangsonww/DevVerse-SWE-Blog devverse-swe.vercel.app 🪐 DevVerse CS Blog – A modern, high-performance blog app built with Next.js, Vercel, Supa | 15 | Claude Code, Codex, GitHub Copilot, OpenCode | 17 | 3,839 tok |
| Cynrath/agent-context-kit cynrath.github.io Offline-first toolkit for agent-ready repositories: readiness scoring, instruction graphs, | 14 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 4 | 4,051 tok |
| joslat/maf-doctor AI-powered toolkit for Microsoft Agent Framework (MAF) migrations — agents, skills, MCP se | 14 | Claude Code, Codex, GitHub Copilot, OpenCode | 6 | 7,410 tok |
| Coveros/StrategiesforTestingAI Repo for Strategies for Testing AI-Based Systems Class | 14 | Claude Code, GitHub Copilot | 8 | 680 tok |
| ahmadulhoq/agentskel The skeleton for agentic development — persistent memory, shared standards, and structured | 13 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 7 | 5,625 tok |
| 33Audits/cca-audit-agent | 12 | Claude Code, GitHub Copilot | 3 | 2,036 tok |
| ensingm2/AI-threat-modeling-rulesets A collection of rule and instruction sets for AI systems such as GitHub copilot and Cursor | 12 | GitHub Copilot, Cursor | 2 | 1,449 tok |
| samibs/skillfoundry skillfoundry.work AI engineering framework with quality gates, persistent memory, and multi-platform support | 12 | Claude Code, Codex, GitHub Copilot, OpenCode | 8 | 9,508 tok |
| ruah-dev/ruah-orch | 12 | Claude Code, Codex, GitHub Copilot, OpenCode | 9 | 508 tok |
| starloghq/index starlog.dev Vet a package before your AI coding agent uses it — authoritative facts (CVEs, license, ma | 12 | Codex, GitHub Copilot, OpenCode | 2 | 172 tok |
| sane-apps/SaneProcess saneapps.com Workflow guardrails for coding agents and LLM-assisted development: AGENTS.md, native hook | 11 | Claude Code, Codex, GitHub Copilot, OpenCode | 9 | 4,293 tok |
| vkpriyesh/ai-stuff | 11 | GitHub Copilot | 3 | 877 tok |
| ailinter/ailinter ailinter.dev Open-source AI linter and safety visor for AI-assisted development | 11 | Codex, GitHub Copilot, OpenCode | 2 | 3,514 tok |
| shrec/AIWorkHub shrec.github.io Open-source, local-first control plane for multi-model AI coding agents in VS Code and MCP | 11 | Claude Code, Codex, GitHub Copilot, OpenCode | 6 | 5,009 tok |
| Community-VyProjects/VyMCP MCP server for VyOS routers, powered by VyManager — lets AI agents read and manage routers | 11 | GitHub Copilot | 1 | 479 tok |
| microsoft/Build26-BRK242-turn-your-agents-into-action-connect-tools-apis-and-documents build.microsoft.com Resources for connecting agents to the right tools, APIs, and documents with context-aware | 10 | Codex, GitHub Copilot, OpenCode | 2 | 752 tok |
| 777genius/lintai 777genius.github.io Offline-first, precision-first security linter for SKILLS, MCP, plugins, configs and other | 10 | Claude Code, GitHub Copilot | 3 | 21 tok |
| the-missing-pink/ai-repository-security-baseline A baseline configuration and guidelines for securing source code repositories, covering br | 10 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 7,110 tok |
| adhocteam/cloud-gov-instructions adhocteam.github.io A reusable set of instruction files for AI coding assistants (like GitHub Copilot) that en | 10 | Claude Code, Codex, GitHub Copilot, OpenCode | 9 | 21,131 tok |
| coherentforge/CambiOS coherentforge.com Zero-trust, capability-based Rust microkernel targeting formal verification. Tri-arch (x86 | 10 | Claude Code, GitHub Copilot | 3 | 19,715 tok |
| matsuni-kk/agent_template_public Agent Template Framework for Domain-Specific Agent Generation - Public Version | 10 | Claude Code, Codex, GitHub Copilot, OpenCode | 7 | 4,002 tok |
| briangmilnes/APAS-VERUS Proving 'Algorithms Parallel and Sequential' in Rust (APAS-AI) using Verus. | 10 | Claude Code, GitHub Copilot | 2 | 50,822 tok |
| ukorvl/web-of-flaws A structured library of web security flaws for humans and coding agents with vulnerable ex | 9 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 923 tok |
| KumaBase/agent-base | 9 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 7 | 3,029 tok |
| IvanBBaev/servicenow-mcp-ai ivanbbaev.github.io ServiceNow MCP server — 67 tools over the full REST surface, with plan-and-apply write saf | 9 | Codex, GitHub Copilot, OpenCode | 12 | 6,873 tok |
| MadaBurns/bv-mcp blackveilsecurity.com DNS, email-authentication, TLS and exposure scanning for AI agents: 81 MCP tools, scored 0 | 9 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode | 20 | 10,311 tok |
| shigechika/mcp-stdio Bidirectional stdio ↔ HTTP gateway for MCP servers — connect clients to remote servers or | 9 | Claude Code, GitHub Copilot | 2 | 8,253 tok |
| L-X-T/ng-agentic angulararchitects.io A practical Angular workspace starter with modern best practices, AI-ready tooling, and sc | 9 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode | 4 | 2,522 tok |
| SafetyMP/Autonomous-EHS-Management autonomous-ehs-management.vercel.app Self-hosted incident to verified CAPA, with a TRIR that uses annual hours when the month g | 9 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode | 24 | 2,203 tok |
| ianlintner/rust-oauth2-server ianlintner.github.io Rust OAuth2 Server with Social Logins with observability. Typesafe and Actor System. | 9 | Claude Code, GitHub Copilot | 10 | 5,503 tok |
| SamErde/TheCleaners day3bits.com PowerShell module to clean the loose ends from your Windows Servers. | 9 | Codex, GitHub Copilot, OpenCode | 2 | 1,470 tok |
| actual-software/actual-cli cli.actual.ai Architecture questions, answered from your ADRs. | 8 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 1,269 tok |
| organvm-iii-ergon/public-record-data-scrapper organvm-iii-ergon.github.io 50-state UCC public-records intelligence — fresh, enriched, scored MCA / financing leads v | 8 | GitHub Copilot | 2 | 2,005 tok |
| frootai/frootai frootai.dev From the Roots to the Fruits ! | 7 | Claude Code, Codex, GitHub Copilot, OpenCode | 8 | 9,604 tok |